
$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
File: C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json)
Hash identifier: nWCUr2JBX0CO8zOEfksS/nrzHaxJr9SToGaXc0fkgG0=
Subject key identifier: DB:AD:02:E5:4D:98:AC:06:28:E4:BD:8E:2A:B1:24:63:5F:08:33:81
Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89
Certificate issuer: /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
Certificate serial: 0176
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
Manifest number: 0171
Signing time: Sun 01 Mar 2026 05:46:45 +0000
Manifest this update: Sun 01 Mar 2026 05:46:45 +0000
Manifest next update: Sun 08 Mar 2026 05:46:45 +0000
Files and hashes: 1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: AjU1AI9n7Z2nuIRfJQ6jHVsszkfxQwhSQOFWHn81Brk=)
2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: t0MIsf5kSKoBJahi6fRsfqa8r4EdM71pjRJoiRMsv1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl
rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
Validity
Not Before: Mar 1 05:46:45 2026 GMT
Not After : Mar 8 05:46:45 2026 GMT
Subject: CN=69a3d2c5-486b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:a8:cc:66:7a:e3:25:fe:03:ae:cf:44:72:
9f:8f:66:af:17:d2:ad:83:59:92:16:85:de:0a:0d:
69:51:9a:03:57:b6:32:5f:c7:b2:9a:8e:c6:3f:d1:
40:16:25:90:e5:92:c0:46:d2:19:c7:5c:45:04:65:
de:c4:3c:f5:3c:0a:3d:0f:78:25:62:73:24:20:68:
da:78:5e:5f:67:4b:b9:3c:ca:4d:c6:18:63:6f:98:
c2:07:79:cd:af:41:f1:00:3f:39:1c:e5:0b:e7:cc:
eb:16:23:87:10:6c:99:39:06:75:34:74:86:9a:bc:
69:9b:69:e7:15:fa:5d:1b:ca:4f:d4:aa:b4:41:bb:
f2:e4:74:0e:7f:c2:b9:d2:1b:15:bb:24:62:cf:bb:
ae:06:c6:e0:40:1b:e6:03:e9:dd:2f:70:0a:b8:df:
42:40:c1:2c:c1:17:25:9c:98:52:c2:f9:b8:1b:17:
35:31:b3:86:77:74:ba:fd:df:81:37:f5:6f:fe:2d:
a1:97:25:04:7b:5f:fe:22:83:fc:3f:c5:2e:fc:15:
7d:86:89:f4:92:86:af:0c:77:6f:7d:24:76:31:24:
88:61:f8:ac:50:11:ca:c7:90:5b:85:2f:ee:e3:91:
0e:9b:25:74:83:06:55:fa:3e:86:a4:ff:db:26:df:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AD:02:E5:4D:98:AC:06:28:E4:BD:8E:2A:B1:24:63:5F:08:33:81
X509v3 Authority Key Identifier:
keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6d:ad:cc:6d:6f:9e:9c:16:8c:9e:89:76:36:35:c6:40:de:
c7:a0:e4:65:a6:98:41:35:2c:e1:e0:ad:09:90:6b:81:d6:7c:
f0:c6:4c:70:87:cf:f8:6d:44:06:0e:2a:e5:80:42:74:26:8f:
4d:c8:28:e0:1b:6c:16:4f:6e:62:bc:d7:c9:cb:e8:ca:fc:93:
ab:40:53:a4:db:06:8e:a2:9d:86:0a:51:bf:ad:70:91:3d:7a:
03:5e:16:35:da:a3:c3:36:1a:7a:f4:ac:f9:13:e3:b1:0a:ba:
87:6b:00:ec:9f:49:6a:aa:cb:10:a3:92:e6:b2:9b:c7:65:bc:
db:b3:64:6d:49:70:c5:e5:99:cf:43:e8:37:17:32:66:68:a0:
22:69:d6:f7:94:89:52:80:51:42:ba:33:c6:4d:57:70:d6:1f:
0b:b3:55:21:68:09:08:30:a7:42:a2:2b:53:67:af:a6:3c:a4:
fa:bd:2a:2a:39:82:56:79:5c:52:da:ab:d4:38:34:96:d5:8a:
c3:60:54:b9:24:c8:ce:f2:23:98:57:b5:33:43:5d:31:df:c3:
3d:ac:88:d7:6b:83:c8:3b:5c:74:9c:d5:35:40:2e:3c:16:af:
b0:8d:dd:65:0f:17:72:1d:2b:6e:4f:04:e5:d8:53:42:8c:e7:
9a:27:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:05 2026 by rpki-client